Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/Piu_NG69SqC3bhDFgyGtM9ctUZ8.mft
File:                     Piu_NG69SqC3bhDFgyGtM9ctUZ8.mft (raw, json)
Hash identifier:          hAm5dGEFlp6OFaO2o289NiijKiv9RV0TuXfMiDY0cwg=
Subject key identifier:   51:99:F4:65:D5:98:39:56:9C:20:C4:A6:D9:FE:37:60:A7:A8:52:84
Authority key identifier: 3E:2B:BF:34:6E:BD:4A:A0:B7:6E:10:C5:83:21:AD:33:D7:2D:51:9F
Certificate issuer:       /CN=3e2bbf346ebd4aa0b76e10c58321ad33d72d519f
Certificate serial:       019238B87E615B856432F1A19665890B0AEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Piu_NG69SqC3bhDFgyGtM9ctUZ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/Piu_NG69SqC3bhDFgyGtM9ctUZ8.mft
Manifest number:          0CD9
Signing time:             Sat 28 Sep 2024 13:01:07 +0000
Manifest this update:     Sat 28 Sep 2024 13:01:07 +0000
Manifest next update:     Sun 29 Sep 2024 13:01:07 +0000
Files and hashes:         1: 3wJ46YMJLxBe_f-IKcFfPurMqu4.roa (hash: xwnQ5FASbC47FwbmxhudE30+a0FohgkkYdW3lSSx1W8=)
                          2: FQu3BNWeVk4y0n3J7oh3hQihd-Q.roa (hash: DaibmH9iDPlL1WbPxRnUmsGyW84dCus/1lMY8pF71HM=)
                          3: Piu_NG69SqC3bhDFgyGtM9ctUZ8.crl (hash: GA19dZcGaKlTNbuXIvGOh7FEHM3hn1KCWEyc1hfRfvY=)
                          4: bHr4YCSWLIosli9YK49bA0-OO9s.roa (hash: TDDr1OVBsLh3TMRwL1sVL3v3Rpsc2BZHCDRBlWXsNW4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/Piu_NG69SqC3bhDFgyGtM9ctUZ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/Piu_NG69SqC3bhDFgyGtM9ctUZ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Piu_NG69SqC3bhDFgyGtM9ctUZ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 07:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:38:b8:7e:61:5b:85:64:32:f1:a1:96:65:89:0b:0a:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e2bbf346ebd4aa0b76e10c58321ad33d72d519f
        Validity
            Not Before: Sep 28 13:01:07 2024 GMT
            Not After : Sep 29 13:01:07 2024 GMT
        Subject: CN=5199f465d59839569c20c4a6d9fe3760a7a85284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0e:2a:e2:2a:83:42:59:43:39:33:1d:5d:63:
                    f5:96:52:e1:e5:89:5e:eb:0b:28:3d:f7:05:59:c5:
                    e9:18:41:11:91:d0:54:ac:78:3c:b5:de:f4:80:d0:
                    ad:cf:53:64:ba:1c:53:c9:48:ba:bf:d5:c1:30:88:
                    6f:6c:31:6b:f7:eb:68:d9:1f:d4:9d:fe:5b:9f:15:
                    8e:f4:ea:fa:bb:5f:dd:00:27:c8:cb:13:5d:a5:21:
                    b0:9b:13:2a:20:da:03:65:b8:6d:fb:36:a6:fa:87:
                    4a:b9:2f:08:be:5b:94:79:ed:54:e7:91:d0:dd:fb:
                    25:c4:ba:7b:5d:37:c2:35:f1:ef:8d:ce:6c:d8:11:
                    e0:ed:28:51:da:aa:99:42:9b:a3:0e:e9:57:bc:1e:
                    0c:ba:e9:cf:25:0d:dc:6c:df:ce:c5:73:ae:9d:00:
                    a4:ce:f3:25:cd:b7:68:c8:84:1e:be:61:ac:f9:c3:
                    76:16:54:a9:07:14:87:90:1e:02:a3:82:a5:fb:7f:
                    fb:50:2c:ce:c8:15:05:45:4d:18:6a:21:f2:ac:70:
                    39:33:37:d7:fd:6b:a2:73:2c:d4:3b:93:60:0b:42:
                    08:a1:d4:4d:38:1e:20:0d:a7:5d:d1:41:7a:8d:c2:
                    54:46:67:e8:18:df:6b:d3:88:80:09:d5:b6:a4:0e:
                    68:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:99:F4:65:D5:98:39:56:9C:20:C4:A6:D9:FE:37:60:A7:A8:52:84
            X509v3 Authority Key Identifier:
                keyid:3E:2B:BF:34:6E:BD:4A:A0:B7:6E:10:C5:83:21:AD:33:D7:2D:51:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Piu_NG69SqC3bhDFgyGtM9ctUZ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/Piu_NG69SqC3bhDFgyGtM9ctUZ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/Piu_NG69SqC3bhDFgyGtM9ctUZ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:f4:cd:bf:6a:87:64:c1:09:ea:f1:f0:9a:97:9b:08:4a:87:
         62:fa:ba:eb:00:5e:4e:7a:30:59:7c:20:17:16:6f:30:97:23:
         90:1c:28:aa:6d:9b:54:a3:3f:f4:90:0f:03:d2:46:b0:ef:4b:
         43:76:c0:ff:01:c2:49:c4:47:dd:dc:cc:7c:ed:70:f2:ea:6f:
         91:91:6d:af:25:d6:66:a3:4a:fb:6f:db:34:58:a0:aa:d6:7d:
         ef:e2:dc:23:ca:7a:1e:5d:7e:84:2d:73:65:f4:89:a7:25:ee:
         9e:ca:3d:9a:91:50:56:fc:e8:0c:77:93:46:ff:53:7c:01:43:
         b9:d4:4e:f8:ed:fe:95:cc:ba:8b:78:e6:21:f6:7f:4c:71:12:
         cb:a7:e4:0f:ae:bb:67:a3:e8:45:c1:22:46:da:df:50:64:47:
         db:be:6b:5a:5a:f2:7d:d2:30:91:42:a7:34:83:41:5b:22:16:
         2c:1c:47:25:c1:66:2e:51:c2:b6:dc:7d:68:fe:14:c7:47:ae:
         57:a4:3c:6e:72:bd:ae:ed:50:0d:23:3d:05:44:c6:e1:56:6a:
         07:84:9d:88:10:16:9c:3e:21:d9:66:8c:9b:41:f1:1a:e5:b9:
         85:c1:50:42:d6:bc:64:76:f8:36:b8:93:65:a1:0f:c3:5a:ca:
         00:c8:a3:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----